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Amendments to the Claims 

Please amend the claims of the present application as set forth below. 

Claims 1-37 were originally filed. 

Claims 1, 2, 13, 14, 25, 26, and 27 are cancelled without prejudice. 
Claims 3 — 12, IS — 24, and 28 - 37 are pending. 



1-2. (cancelled) 

3. (currently amended) The method as recited in Claim 2, A 
method for controlling access to a server device bv at least one client device that is 
operatively coupled to the server device through at least one interconnecting 
network, the method comprising: 

causing a user-side portion of a network server logic within the server 
device to selectively specify at least one network from which the user-side portion 
would accept client device information; 

causing a kernel-side portion of the network server logic to accept the client 
device information only if the client device information has been provided via the 
specified network: and 

if the client device information has not been provided via the specified 
network, causing the kernel-side portion to reject the client device information and 
notify the client device in a manner that identifies the rejection, wherein the 
kernel-side portion notifies the client device using at least one message selected 
from a group of messages comprising a TCP reset message and an ICMP 
destination unreachable message, as applicable. 
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4. (currently amended) The method as recited in Claim [[1]] 3, further 
comprising: 

providing a communication socket for use by the kernel-side portion; and 
5 causing the kernel-side portion to compare client device information 

o received on the communication socket to the specified network. 

7 

k 5. (currently amended) The method as recited in Claim [[1]] 3, wherein 

9 causing the user-side portion to selectively specify at least one network from 

10 which the user-side portion would accept the client device information, further 

1 1 includes causing the user-side portion to selectively specify a plurality of networks 

12 from which the user-side portion would accept the client device information; and 

13 wherein causing the kernel-side portion to accept the client device 
H information only if the client device information has been provided via the 
is specified network, further includes causing the kernel-side portion to accept the 

16 client device information only if the client device information has been provided 

17 via at least one of the specified plurality of networks. 

18 

io 6. (currently amended) The method as recited in Claim [[ 1 ]] 1, wherein 

jo causing the user-side portion to selectively specify the at least one network from 

21 which the user-side portion would accept the client device information further 

22 includes having the user-side portion specify at least one local network interface. 

23 

24 7. (currently amended) The method as recited in Claim [[1]] 3, wherein 

25 causing the user-side portion to selectively specify the at least one network from 
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which the user-side portion would accept the client device information further 
includes having the user-side portion specify at least one IP address. 

8. (currently amended) The method as recited in Claim [[1]] 3, wherein 
the network server logic is operatively configured to support at least one client- 
server based process selected from a group of processes comprising a file-sharing 
communication process, a TCP-based communication process, a UDP-based 
communication process, a HTTP-based communication process, a digital media 
based communication process, a DNS-based communication process, and a 
database related communication process. 

9. (currently amended) The method as recited in Claim [[1]] 3, wherein 
the user-side portion includes an application-programming interface (API) 
operatively configured to allow an application to specify the at least one network 
from which the user-side portion would accept the client device information. 



1 0, (original) The method as recited in Claim 9, wherein the API is 
a further operatively configured to allow the application to specify a listing of 

19 networks from which the user-side portion would accept the client device 

20 information. 

21 

22 11. (original) The method as recited in Claim 10, wherein the API is 

23 further operatively configured to allow the application to selectively modify the 

24 listing of networks from which the user-side portion would accept the client device 

25 information. 
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12. (currently amended) The method as recited in Claim [[1]] 3, wherein 
the kernel-side portion includes a TCP/IP driver. 



13-14. 



(cancelled) 



15. (original) Th e ooraputor readable modium aa rooitod in Claim 1 4 
A computer-readable medium having computer-executable instructions for 
performing steps comprising: 

causing a user-side portion of a network server logic within a server device 
to selectively specify at least one network from which the user-side portion would 
accept client device information; 

causing a kernel-side portion of the network server logic to accept the 
client device information only if the client device information has been provided 
via the specified network: and 

if the client device information has not been provided via the specified 
network, causing the kernel-side portion to reject the client device information and 
notify the client device in a manner that identifies the rejection, wherein the 
kernel-side portion notifies the client device using at least one message selected 
from a group of messages comprising a TCP reset message and an ICMP 
destination unreachable message, as applicable. 
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16. (currently amended) The computer-readable medium as recited in 
Claim [[13]] 15, further comprising computer-executable instructions for: 

providing a communication socket for use by the kernel-side portion; and 
causing the kernel-side portion to compare client device information 
received on the communication socket to the specified network. 

17. (currently amended) The computer-readable medium as recited in 
Claim [[13]] 15, wherein causing the user-side portion to selectively specify at 
least one network from which the user-side portion would accept the client device 
information further includes causing the user-side portion to selectively specify a 
plurality of networks from which the user-side portion would accept the client 
device information; and 

wherein causing the kernel-side portion to accept the client device 
information only if the client device information has been provided via the 
specified network, further includes causing the kernel-side portion to accept the 
client device information only if the client device information has been provided 
via at least one of the specified plurality of networks. 

18. (currently amended) The computer-readable medium as recited in 
Claim [[13]] lj>, wherein causing the user-side portion to selectively specify the at 
least one network from which the user-side portion would accept the client device 
information further includes having the user-side portion specify at least one local 
network interface. 
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19. (currently amended) The computer-readable medium as recited in 
Claim [[13]] 15, wherein causing the user-side portion to selectively specify the at 
least one network from which the user-side portion would accept the client device 
information further includes, having the user-side portion specify at least one IP 
address. 

20. (currently amended) The computer-readable medium as recited in 
Claim [[13]] 15, wherein the network server logic is operatively configured to 
support at least one client-server based process selected from a group of processes 
comprising a file-sharing communication process, a TCP-based communication 
process, a UDP-based communication process, a HTTP-based communication 
process, a digital media based communication process, a DNS-based 
communication process, and a database related communication process. 

2L (currently amended) The computer-readable medium as recited in 
Claim [[13]] 15, wherein the user-side portion includes an application- 
programming interface (API) operatively configured to allow an application to 
specify the at least one network from which the user-side portion would accept the 
client device information. 

22. (original) The computer-readable medium as recited in Claim 21, 
wherein the API is further operatively configured to allow the application to 
specify a listing of networks from which the user-side portion would accept the 
client device information. 
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23. (original) The computer-readable medium as recited in Claim 22, 
wherein the API is further operatively configured to allow the application to 
selectively modify the listing of networks from which the user-side portion would 
accept the client device information. 

24. (currently amended) The computer-readable medium as recited in 
Claim [[13]] 15, wherein the kernel-side portion includes a TCP/IP driver. 



25-27. (cancelled) 

2 8 (currently amended) 
apparatus comprising: 



Th e appQratuo as recited in Claim 27. An 



memory: and 

network server l ogic, onerativelv coupled to the memory and configurable 
to support at least one client-server communication session, the network serve; 
logic having: 

a user-side portion that is configured to selectively specify at least one 
network from which the user-side portion would accept client device information. 
and 

a kemel-side portion that is configured to accent the client device 
information only if the client device information has been provided via the 



specified network. 



wherein if the client device information has not been provided via the 
specified network, the kemel-side portion is further configured to reject the client 
device information and notify t he client device in a manner that identifies the 
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rejection, and wherein the kernel-side portion is further configured to notify the 
client device using at least one message selected from a group of messages 
comprising a TCP reset message and an ICMP destination unreachable message, as 
applicable. 

29. (currendy amended) The apparatus as recited in Claim [[26]] 28, 
further comprising: 

a communication socket for use by the kernel-side portion during the 
communications session, and wherein the kernel-side portion is further configured 
to compare client device information received on the communication socket to the 
specified network. 

30. (currently amended) The apparatus as recited in Claim [[26]] 28, 
wherein the user-side portion is further configured to selectively specify a plurality 
of networks from which the user-side portion would accept the client device 
information; and 

wherein the kernel-side portion is further configured to accept the client 
device information only if the client device information has been provided via at 
least one of the specified plurality of networks. 

31. (currently amended) The apparatus as recited in Claim [[26]] 28, 
wherein the user-side portion is further configured to specify at least one local 
network interface. 
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32. (currently amended) The apparatus as recited in Claim [[26]] 28, 
wherein the user-side portion is further configured to specify at least one IP 
address. 

33. (currently amended) The apparatus as recited in Claim [[26]] 28, 
wherein the communication session is further configured to support at least one 
communication process selected from a group of communication processes 
comprising a file-sharing communication process, a TCP-based communication 
process, a UDP-based communication process, a HTTP-based communication 
process, a digital media based communication process, a DNS-based 
communication process, and a database related communication process. 

34. (currently amended) The apparatus as recited in Claim [[26]] 28, 
wherein the user-side portion includes: 

an application-programming interface (API) operatively configurable to 
allow an application to specify the at least one network from which the user-side 
portion would accept the client device information. 

35. (original) The apparatus as recited in Claim 34, wherein the API 
is further operatively configurable to allow the application to specify a listing of 
networks from which the user-side portion would accept the client device 
information. 



21 
22 
23 

24 36. (original) The apparatus as recited in Claim 35, wherein the API 

25 is further operatively configurable to allow the application to selectively modify 
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the listing of networks from which the user-side portion would accept the client 
device information. 

37. (currently amended) The apparatus as recited in Claim [[26]] 28, 
wherein the kernel-side portion includes a TCP/IP driver. 
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